Malware

Malware.AI.4024182387 malicious file

Malware Removal

The Malware.AI.4024182387 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.4024182387 virus can do?

  • A file was accessed within the Public folder.
  • Uses Windows utilities for basic functionality
  • Performs HTTP requests potentially not found in PCAP.
  • Reads data out of its own binary image
  • Drops a binary and executes it
  • Authenticode signature is invalid
  • Attempts to identify installed AV products by installation directory
  • Attempts to modify proxy settings
  • Touches a file containing cookies, possibly for information gathering
  • Uses suspicious command line tools or Windows utilities

How to determine Malware.AI.4024182387?


File Info:

name: 45D8CFE3450562564A1E.mlw
path: /opt/CAPEv2/storage/binaries/86a0761fa0f6b15d9d5342882e09992270358766d5c11ef1b8d848c7f4075c79
crc32: FCCDF11D
md5: 45d8cfe3450562564a1eb00a1aa0db83
sha1: 6bbdc51640ea88fdd15e58e60c1e7e4a27fcc5f0
sha256: 86a0761fa0f6b15d9d5342882e09992270358766d5c11ef1b8d848c7f4075c79
sha512: 143fa838787cf1a0d21059934ba742c107ee2b4ae153d376efce97104929e6ff415e80cba1b54045944f68fb179205a58c28a863f8729fb5e03763a40db30ad9
ssdeep: 1536:nEfvVEQaBgVQgvcgIL1b2mnL3BCzApk8+cn99De3U2hIag6:nElEfgV/vcgEvbAUtn99DeE2hI
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1AE835A03F5E5E033E0231131A962A773597FBA339935060BF7854A7E6EE41E08E29793
sha3_384: 408b723c6429165b10fcae2c44b58bb9ed4f435714625a0ebdc48a9a56adf56524a80d1429d71bcf56485498b1375e5b
ep_bytes: e8bb190000e989feffff8bff558bec83
timestamp: 2008-02-12 02:30:01

Version Info:

0: [No Data]

Malware.AI.4024182387 also known as:

BkavW32.Common.ADC81C63
LionicTrojan.Win32.Generic.4!c
Elasticmalicious (high confidence)
MicroWorld-eScanGen:Variant.Doina.15844
FireEyeGeneric.mg.45d8cfe345056256
CAT-QuickHealTrojan.Dynamer.8882
SkyhighBehavesLike.Win32.Dropper.mh
McAfeeGenericRXFL-IR!45D8CFE34505
MalwarebytesMalware.AI.4024182387
VIPREGen:Variant.Doina.15844
SangforTrojan.Win32.Save.a
K7AntiVirusTrojan-Downloader ( 0052f5751 )
BitDefenderGen:Variant.Doina.15844
K7GWTrojan-Downloader ( 0052f5751 )
SymantecTrojan Horse
ESET-NOD32a variant of Win32/TrojanDownloader.Speccom.S
APEXMalicious
KasperskyTrojan.Win32.IndigoZebra.b
AlibabaTrojanDownloader:Win32/IndigoZebra.0c65f752
NANO-AntivirusTrojan.Win32.Speccom.faxeib
ViRobotTrojan.Win32.Agent.88576.AL
RisingDownloader.Speccom!8.ECD (TFE:5:AsWd1BUldPR)
SophosMal/Generic-S
F-SecureHeuristic.HEUR/AGEN.1366582
DrWebTrojan.MulDrop7.57212
ZillyaDownloader.Speccom.Win32.6
TrendMicroTROJ_GEN.R002C0PHJ23
EmsisoftGen:Variant.Doina.15844 (B)
IkarusTrojan-Downloader.Win32.Speccom
JiangminTrojan.Indigo.a
WebrootW32.Trojan.Xcaon
GoogleDetected
AviraHEUR/AGEN.1366582
VaristW32/Doina.R.gen!Eldorado
Antiy-AVLTrojan[APT]/Win32.Indigozebra
KingsoftWin32.Trojan.IndigoZebra.b
MicrosoftTrojan:Win32/Skeeyah
XcitiumMalware@#27eek0y8sah23
ArcabitTrojan.Doina.D3DE4
ZoneAlarmTrojan.Win32.IndigoZebra.b
GDataGen:Variant.Doina.15844
CynetMalicious (score: 100)
AhnLab-V3Trojan/Win32.Xcaon.C2336333
VBA32BScope.Trojan.Indigo
ALYacBackdoor.Agent.BoxCaon
MAXmalware (ai score=98)
DeepInstinctMALICIOUS
Cylanceunsafe
PandaTrj/GdSda.A
TrendMicro-HouseCallTROJ_GEN.R002C0PHJ23
TencentMalware.Win32.Gencirc.10bd9a0d
YandexTrojan.GenAsa!TgKzWCYI6WQ
SentinelOneStatic AI – Malicious PE
MaxSecureTrojan.Malware.73376928.susgen
FortinetW32/Speccom.S!tr.dldr
BitDefenderThetaGen:NN.ZexaF.36792.fqW@aWG8swk
AVGWin32:Malware-gen
AvastWin32:Malware-gen
CrowdStrikewin/malicious_confidence_100% (W)

How to remove Malware.AI.4024182387?

Malware.AI.4024182387 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment